CVE-2025-46148

CVE-2025-46148 affects PyTorch up to version 2.6.0 when using eager execution, where nn.PairwiseDistance(p=2) can produce incorrect results. Connected entries (BIT-PYTORCH-2025-46148, NVD, OSV variants, Debian/Ubuntu OSV, CNVD) corroborate the issue with identical description. The vulnerability i...

Miscomputed results when using AVX2 backend

The v0.9.7 release of the sha2 crate introduced a new AVX2-accelerated backend which was automatically enabled for all x86/x8664 CPUs where AVX2 support was autodetected at runtime. This backend was buggy and would miscompute results for long messages i.e. messages spanning multiple SHA blocks. T...

RUSTSEC-2021-0100 Miscomputed results when using AVX2 backend

The v0.9.7 release of the sha2 crate introduced a new AVX2-accelerated backend which was automatically enabled for all x86/x8664 CPUs where AVX2 support was autodetected at runtime. This backend was buggy and would miscompute results for long messages i.e. messages spanning multiple SHA blocks. T...